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WHAT IS CLAIMED IS: 

1. A method for providing a general purpose 
computing platform at a router on a network, comprising: 

configuring a virtual machine on a router with a 
5 plurality of parameters; 

receiving logic from a remote site at the virtual 
machine; and 

verifying that the virtual machine may host the 
logic based on the parameters created during 
10 configuration. 



2. The method of Claim 1, wherein configuring the 
virtual machine on the router with the parameters 
comprises allocating a processing resource operable to 
15 execute the logic on the virtual machine. 



3. The method of Claim 1, wherein: 

configuring the virtual machine on the router with 
the parameters comprises allocating a processing resource 
20 operable to execute the logic on the virtual machine; and 

verifying that the virtual machine may host the 
logic based on the parameters created during 
configuration comprises determining whether the 
processing resource is available to execute the logic. 

25 

4. The method of Claim 1, wherein configuring the 
virtual machine on the router with the parameters 
comprises assigning a plurality of authorized credentials 
to the virtual machine. 
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5. The method of Claim 1, wherein: 

configuring the virtual machine on the router with 
the parameters comprises assigning a plurality of 
authorized credentials to the virtual machine; 
5 receiving the logic from the remote site at the 

virtual machine comprises determining an address 
associated with the remote site; and 

verifying that the virtual machine may host the 
logic based on the parameters created during 
10 configuration comprises: 

retrieving logic credentials for the logic from 
the remote site using the determined address; and 

comparing the authorized credentials with the 
logic credentials. 

15 

6. The method of Claim 1, wherein configuring the 
virtual machine on the router with the parameters 
comprises provisioning a first lifecycle policy for the 
virtual machine. 
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7. The method of Claim 1, wherein: 

configuring the virtual machine on the router with 
the parameters comprises provisioning a first lifecycle 
policy for the virtual machine; 
5 receiving the logic from the remote site at the 

virtual machine comprises determining an address 
associated with the remote site; and 

verifying that the virtual machine may host the 
logic based on the parameters created during 
10 configuration comprises: 

retrieving a second lifecycle policy for the 
logic from the remote site using the determined address; 
and 

altering the first lifecycle policy if the 
15 second lifecycle policy includes different constraints 
than the first lifecycle policy, 

8. The method of Claim 1, wherein receiving the 
logic from the remote site at the virtual machine 

20 comprises: 

determining an address associated with the remote 
site; and 

retrieving a manifest for the logic from the remote 
site using the determined address, the manifest including 
25 a configurable object needed to execute the logic on the 
virtual machine. 
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9. The method of Claim 1, wherein: 

configuring the virtual machine on the router with 
the parameters comprises provisioning a first lifecycle 
policy for the virtual machine; 
5 receiving the logic from the remote site at the 

virtual machine comprises: 

determining an address associated with the 
remote site; and 

retrieving a manifest for the logic from the 
10 remote site using the determined address, the manifest 
including a configurable object needed to execute the 
logic on the virtual machine; and 

verifying that the virtual machine may host the 
logic based on the parameters created during 
15 configuration comprises: 

retrieving a second lifecycle policy for the 
logic from the remote site using the determined address; 
and 

updating the logic if the second lifecycle 
20 policy includes a new version of the configurable object. 

10. The method of Claim 1, wherein the virtual 
machine comprises a virtual interface including an 
address . 

25 

11. The method of Claim 1, wherein the virtual 
machine comprises a virtual service including a plurality 
of addresses. 
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12. The method of Claim 1 further comprising: 
loading default configuration parameters for the 
router; and 

receiving a provisioning message to configure the 
virtual machine on the router. 
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13. A method for providing a general purpose 
computing platform at a router on a network, comprising: 

configuring a virtual machine on a router with a 
plurality of parameters, the parameters including a 
5 plurality of authorized credentials; 

determining an address associated with a remote 

site; 

retrieving logic and logic credentials from the 
remote site using the determined address; and 
10 comparing the authorized credentials with the logic 

credentials to verify that the virtual machine may host 
the logic. 

14. The method of Claim 13, wherein the parameters 
15 include a processing resource allocated to execute the 

logic on the virtual machine and further comprising 
determining whether the processing resource is available 
to execute the logic to verify that the virtual machine 
may host the logic. 

20 

15. The method of Claim 13, wherein the parameters 
include a first lifecycle policy and further comprising: 

determining an address associated with the remote 

site; 

25 retrieving a second lifecycle policy for the logic 

from the remote site using the determined address; and 

updating a version of the logic on the virtual 
machine based on the second lifecycle policy. 
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16. The method of Claim 13, wherein the parameters 
include a first lifecycle policy and further comprising: 

determining an address associated with the remote 

site; 

5 retrieving a second lifecycle policy for the logic 

from the remote site using the determined address; and 

determining if the logic on the virtual machine is 
accessible by a remote service based on the second 
lifecycle policy. 

10 

17. The method of Claim 13, wherein the parameters 
include a first lifecycle policy and further comprising: 

determining an address associated with the remote 

site ; 

15 retrieving a second lifecycle policy for the logic 

from the remote site using the determined address; and 

executing the logic on the virtual machine based on 
usage criteria in the second lifecycle policy. 
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18. A router comprising: 
a processor; and 

a virtual machine coupled to the processor, the 
virtual machine configured to host logic acquired from a 
5 remote site and operable to verify whether the processor 
may execute the acquired logic. 

19. The router of Claim 18, wherein the virtual 
machine is further operable to generate a plurality of 

10 authorized credentials. 

20. The router of Claim 18, wherein the virtual 
machine is further operable to: 

generate a plurality of authorized credentials; 
15 retrieve logic credentials for the logic by 

determining an address associated with the remote site; 
and 

compare the logic credentials with the authorized 
credentials to verify that the processor may execute the 
20 acquired logic. 

21. The router of Claim 18, further comprising the 
virtual machine operable to allocate the processor to 
execute the logic. 

25 

22. The router of Claim 18, wherein the virtual 
machine is further operable to: 

allocate the processor to execute the logic; and 
determine if the processor is available to execute 
30 the logic. 
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23. The router of Claim 18, wherein the virtual 
machine is further operable to: 

provision a first lifecycle policy; 

retrieve a second lifecycle policy for the logic by 
5 determining an address associated with the remote site; 
and 

alter the first lifecycle policy if the second 
lifecycle policy includes different constraints than the 
first lifecycle policy. 

10 

24. The router of Claim 18, wherein the virtual 
machine is further operable to: 

provision a first lifecycle policy; 

retrieve a second lifecycle policy for the logic by 
15 determining an address associated with the remote site; 
and 

update a version of the logic based on the second 
lifecycle policy. 

20 25. The router of Claim 18, wherein the virtual 

interface is further operable to: 

provision a first lifecycle policy; 

retrieve a second lifecycle policy for the acquired 
logic by determining an address associated with the 
25 remote site; and 

execute the logic based on usage criteria included 
in the second lifecycle policy. 
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26. The router of Claim 18, wherein the virtual 
interface is further operable to: 

provision a first lifecycle policy; 

retrieve a second lifecycle policy for the acquired 
5 logic by determining an address associated with the 
remote site; and 

determine if the logic is accessible by a remote 
service based on the second lifecycle policy. 

10 27. The router of Claim 18, wherein the virtual 

machine is further operable to: 

provision a first lifecycle policy; 

retrieve a second lifecycle policy for the acquired 
logic by determining an address associated with the 
15 remote site; 

retrieve a manifest for the logic based on the 
address, the manifest including a configurable object 
needed to execute the logic on the virtual machine; and 

update the logic if the second lifecycle policy 
20 includes a new version of the configurable object. 

28. The router of Claim 18, wherein the virtual 
machine comprises a virtual interface including an 
address . 

25 

29. The router of Claim 18, wherein the virtual 
machine comprises a virtual service accessible from one 
or more addresses. 
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30. Logic encoded in media for providing a general 
purpose computing platform at a router on network, the 
logic operable to perform the following steps: 

configuring a virtual machine on a router with a 
5 plurality of parameters; 

receiving logic from a remote site at the virtual 
machine; and 

verifying that the virtual machine may host the 
logic based on the parameters created during 
10 configuration. 



31. The logic of Claim 30, further comprising: 
allocating a processing resource operable to execute 

the logic on the virtual machine; and 
15 determining whether the processing resource is 

available to execute the logic. 



32. The logic of Claim 30, further comprising: 
assigning a plurality of authorized credentials to 
20 the virtual machine; 

determining an address associated with the remote 

site; 

retrieving logic credentials for the logic from the 
remote site based on the determined address; and 
25 comparing the authorized credentials with the logic 

credentials . 



AUSO 1:236823.2 



ATTORNEY'S DOCKET 
062891. 0566 



PATENT APPLICATION 



54 

33. The logic of Claim 30, further comprising: 
provisioning a first lifecycle policy for the 

virtual machine; 

determining an address associated with the remote 

5 site; 

retrieving a second lifecycle policy for the logic 
from the remote site based on the determine address; and 

updating a version of the logic on the virtual 
machine based the second lifecycle policy. 

10 

34. The logic of Claim 30, further comprising: 
provisioning a first lifecycle policy for the 

virtual machine; 

determining an address associated with the remote 

15 site; 

retrieving a second lifecycle policy for the logic 
from the remote site based on the determined address; and 

executing the logic based on usage criteria included 
in the second lifecycle policy. 

20 

35. The logic of Claim 30, further comprising: 
provisioning a first lifecycle policy for the 

virtual machine; 

determining an address associated with the remote 

25 site; 

retrieving a second lifecycle policy for the logic 
from the remote site based on the determined address; and 
determining if the logic on the virtual machine is 
accessible by a remote service based on the second 
30 lifecycle policy. 



AUS01;236823.2 



ATTORNEY'S DOCKET 
062891 . 0566 



PATENT APPLICATION 



55 

36. The logic of Claim 30, further comprising: 
provisioning a first lifecycle policy for the 
virtual machine; 

determining an address associated with the remote 

5 site; 

retrieving a second lifecycle policy for the logic 
from the remote site based on the determined address; 

receiving a manifest for the logic from the remote 
logic; and 

10 updating the logic if the second lifecycle policy 

includes a new version of a configurable object. 
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37. An apparatus for providing a general purpose 
computing platform at a router on a network, comprising: 

means for configuring a virtual machine on a router 
with a plurality of parameters; 

means for receiving logic from a remote site at the 
virtual machine; and 

means for verifying that the virtual machine may 
host the logic based on the parameters created during 
configuration . 

38. The apparatus of Claim 37, further comprising: 
means for assigning a plurality of authorized 

credentials to the virtual machine; 

means for determining an address associated with the 
remote site; 

means for retrieving logic credentials for the logic 
from the remote site based on the determined address; and 

means for comparing the authorized credentials with 
the logic credentials. 

39. The apparatus of Claim 37, further comprising: 
means for allocating a processing resource operable 

to execute the logic on the virtual machine; and 

means for determining whether the processing 
resource is available to execute the logic. 
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